Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
File: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft (raw, json)
Hash identifier: 2r9aER2o8OgKvyAJBjyyCOZWmF436URAI5Gn6XQlYsM=
Subject key identifier: CF:BB:26:D5:B9:3F:C7:9C:5C:77:B4:C3:DF:39:66:9B:29:88:55:4E
Authority key identifier: 2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
Certificate issuer: /CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Certificate serial: 019D265F169F0B03AF8D24636E5FAD5144C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:00:59 +0000
Manifest this update: Wed 25 Mar 2026 19:00:59 +0000
Manifest next update: Thu 26 Mar 2026 19:00:59 +0000
Files and hashes: 1: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl (hash: +d+2abuHY8vsUfNlaIcx9HoYo8Z4ovNh4TJDG63bQxo=)
2: oPn9BEZzljIPQPQ_eYJw4GgcX3c.roa (hash: MFu3RUWuCmBoIzCATrSbU+RcXXRsfsL7FD0RBKZyeXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:16:9f:0b:03:af:8d:24:63:6e:5f:ad:51:44:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Validity
Not Before: Mar 25 19:00:59 2026 GMT
Not After : Mar 26 19:00:59 2026 GMT
Subject: CN=cfbb26d5b93fc79c5c77b4c3df39669b2988554e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4e:b6:84:5b:75:02:b1:7c:51:68:bb:02:34:
d8:f7:44:78:c9:24:84:9f:bd:44:8c:c3:c8:a3:a8:
50:1a:ec:c0:0d:be:d4:9d:80:a2:34:86:8e:fa:57:
07:14:dd:88:34:6a:f8:26:97:ee:e5:11:02:e1:4b:
c5:1b:3d:61:52:aa:66:60:6f:d7:a2:a8:8b:f2:90:
d8:46:3f:48:50:c2:e1:69:85:6c:13:f4:b3:79:09:
fe:2e:87:fe:ef:bf:e0:3e:40:42:11:40:8d:99:c8:
23:2e:02:72:93:80:11:e5:59:91:fb:d3:76:61:4e:
1a:ab:c1:24:7b:f6:42:dc:38:8d:95:36:5a:a6:fc:
03:0b:b7:38:51:e6:8d:1a:af:0f:30:de:03:4e:e4:
af:3a:dd:4e:db:c3:aa:81:0f:0d:6f:22:2e:6d:72:
2a:44:87:17:70:00:47:21:47:2e:5d:c1:0b:9d:2a:
21:98:f3:64:56:d8:47:ee:fd:68:b6:58:8e:b8:e8:
5b:c5:fa:ad:27:2b:f7:9b:4c:23:71:0d:a0:eb:73:
2d:3d:fd:89:68:bf:1f:eb:75:f4:12:50:3b:35:7a:
67:e1:04:aa:4e:b1:c9:df:f7:27:41:40:78:31:8a:
9a:53:98:bb:d6:9f:3f:99:1a:1e:20:16:c1:55:1e:
34:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BB:26:D5:B9:3F:C7:9C:5C:77:B4:C3:DF:39:66:9B:29:88:55:4E
X509v3 Authority Key Identifier:
keyid:2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:aa:fd:8f:e4:b6:3d:54:b1:c4:bd:52:d0:46:ef:8b:34:2a:
bb:96:5a:7a:10:37:2a:71:06:3d:af:01:b7:75:45:46:4f:07:
31:8c:69:9a:9e:43:72:18:f1:fb:46:3a:e7:b4:a3:56:79:80:
f6:32:02:31:7d:5c:55:d9:47:55:17:59:a8:57:bd:63:9b:41:
43:e9:08:74:d5:cf:31:1f:ff:b2:a9:ae:0f:7f:5f:b5:d3:05:
c1:85:fd:d6:1f:db:e5:60:4e:ad:9e:4e:f0:d4:4d:d7:f3:d3:
7a:3a:e7:bd:28:13:16:01:75:9a:0c:d5:1d:b4:b3:b1:f5:9a:
84:aa:21:c6:d0:98:17:d4:92:e1:5f:8e:a0:a8:ea:dc:0b:b5:
2e:e1:6b:01:bf:a2:8c:86:ba:4a:24:ca:f5:98:82:5d:28:3f:
2f:80:3e:e3:d9:13:c2:cf:1b:d5:39:4e:f0:59:20:ac:1d:fd:
57:4f:6e:60:42:b7:43:7c:8f:75:7f:a8:30:6d:c0:b5:fb:ed:
e3:b3:9c:9d:0b:1f:8d:4d:c4:d8:d5:c4:19:fc:f7:c8:ad:a8:
52:91:1e:0f:5c:e1:a1:f8:09:4c:e1:10:9a:f2:c1:94:7e:3c:
da:eb:b2:07:c9:41:ef:5d:e7:d4:1c:ac:d2:dc:25:c4:20:6a:
a7:56:42:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXxafCwOvjSRjbl+tUUTFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNzI3ZDA5ZmJiMTlhN2Y5ODVkNzUxYTIwMzExYzFiYWQ0
YjA3MWYwHhcNMjYwMzI1MTkwMDU5WhcNMjYwMzI2MTkwMDU5WjAzMTEwLwYDVQQD
EyhjZmJiMjZkNWI5M2ZjNzljNWM3N2I0YzNkZjM5NjY5YjI5ODg1NTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU62hFt1ArF8UWi7AjTY90R4ySSE
n71EjMPIo6hQGuzADb7UnYCiNIaO+lcHFN2INGr4Jpfu5REC4UvFGz1hUqpmYG/X
oqiL8pDYRj9IUMLhaYVsE/SzeQn+Lof+77/gPkBCEUCNmcgjLgJyk4AR5VmR+9N2
YU4aq8Eke/ZC3DiNlTZapvwDC7c4UeaNGq8PMN4DTuSvOt1O28OqgQ8NbyIubXIq
RIcXcABHIUcuXcELnSohmPNkVthH7v1otliOuOhbxfqtJyv3m0wjcQ2g63MtPf2J
aL8f63X0ElA7NXpn4QSqTrHJ3/cnQUB4MYqaU5i71p8/mRoeIBbBVR40qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+7JtW5P8ecXHe0w985ZpspiFVOMB8GA1UdIwQY
MBaAFCxyfQn7sZp/mF11GiAxHButSwcfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEhKOUNmdXhtbi1ZWFhVYUlERWNHNjFMQng4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9iZjNlY2EtMTcxZi00MDFjLTliNWQt
Y2NjNGYxZTAwOTkwLzEvTEhKOUNmdXhtbi1ZWFhVYUlERWNHNjFMQng4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9iZjNlY2EtMTcxZi00MDFjLTliNWQtY2NjNGYxZTAwOTkw
LzEvTEhKOUNmdXhtbi1ZWFhVYUlERWNHNjFMQng4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKr9j+S2
PVSxxL1S0EbvizQqu5ZaehA3KnEGPa8Bt3VFRk8HMYxpmp5Dchjx+0Y657SjVnmA
9jICMX1cVdlHVRdZqFe9Y5tBQ+kIdNXPMR//sqmuD39ftdMFwYX91h/b5WBOrZ5O
8NRN1/PTejrnvSgTFgF1mgzVHbSzsfWahKohxtCYF9SS4V+OoKjq3Au1LuFrAb+i
jIa6SiTK9ZiCXSg/L4A+49kTws8b1TlO8FkgrB39V09uYEK3Q3yPdX+oMG3Atfvt
47OcnQsfjU3E2NXEGfz3yK2oUpEeD1zhofgJTOEQmvLBlH482uuyB8lB713n1Bys
0twlxCBqp1ZCPA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:34 2026 by rpki-client